Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft
File: y1eZ2NBfSgIAEdyoAxdivqASJV0.mft (raw, json)
Hash identifier: dsH+GYD/USyswkrdEFVTP3aOI9kPpSdCpiD8dK8CMvE=
Subject key identifier: 95:70:7D:2D:87:F0:0E:25:86:AF:87:AA:6D:3C:10:CB:5F:A5:60:B3
Authority key identifier: CB:57:99:D8:D0:5F:4A:02:00:11:DC:A8:03:17:62:BE:A0:12:25:5D
Certificate issuer: /CN=cb5799d8d05f4a020011dca8031762bea012255d
Certificate serial: 019369D92B2599A15FB8B750E15559B67695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1eZ2NBfSgIAEdyoAxdivqASJV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft
Manifest number: 08E6
Signing time: Tue 26 Nov 2024 19:01:00 +0000
Manifest this update: Tue 26 Nov 2024 19:01:00 +0000
Manifest next update: Wed 27 Nov 2024 19:01:00 +0000
Files and hashes: 1: VVi2AeeND2YAMXG3tX9hNKKJB0U.roa (hash: rg8F29mgN9CLL79yuOHFg7VTmemPT39fX4LbyECEcus=)
2: ZgXH7g-aUfK1ehVe010onFZj78k.roa (hash: NUk21hqhloDAaeTFnpiR9xyurUnIWUjeV5ujM8REUrQ=)
3: y1eZ2NBfSgIAEdyoAxdivqASJV0.crl (hash: g864IRIDUGD00qXTsUUqoHlLSgbrQSoCTSNmzeic//I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y1eZ2NBfSgIAEdyoAxdivqASJV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:d9:2b:25:99:a1:5f:b8:b7:50:e1:55:59:b6:76:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb5799d8d05f4a020011dca8031762bea012255d
Validity
Not Before: Nov 26 19:01:00 2024 GMT
Not After : Nov 27 19:01:00 2024 GMT
Subject: CN=95707d2d87f00e2586af87aa6d3c10cb5fa560b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e8:b7:2e:e2:f4:1e:c0:c7:ac:dc:37:2a:e4:
91:cb:80:6c:a0:e1:f4:8b:ec:53:1f:ee:28:9f:01:
13:62:ad:ff:5a:ce:56:d0:e0:36:8a:c4:e2:d0:ab:
ae:b4:d5:ec:6c:51:1b:7f:93:04:8c:6b:cf:a8:44:
3c:cd:d1:8b:38:60:fa:2c:9d:80:45:98:bf:c4:fa:
42:15:63:a5:fc:b6:3f:79:e1:38:27:a1:9b:4b:42:
91:dc:b3:a6:cb:d0:96:79:ed:13:76:87:37:06:27:
b7:d3:ca:e9:7c:8b:48:94:9b:be:4f:c7:f2:3e:20:
ec:d6:04:51:c0:de:19:0f:70:44:ab:3f:a9:36:d8:
fd:ad:20:2e:4d:d6:30:ca:34:7a:89:fc:c0:8f:e0:
83:6a:6e:f5:95:4d:b5:7c:69:c0:e8:e0:0e:6e:16:
dd:45:bd:ed:6b:a2:14:97:a7:0b:fb:32:b5:e1:19:
45:b2:f5:21:d6:7c:74:ec:4c:2d:ae:02:4b:ae:a0:
40:a7:e6:1a:e7:2a:13:b2:2a:7f:95:56:aa:af:22:
ab:1f:a3:91:f3:c1:ed:fc:fc:31:fd:82:4d:03:16:
0c:2d:1b:d9:43:c5:9d:72:b2:4a:2c:6f:50:07:00:
03:43:3c:25:1b:d4:46:f3:9c:0e:3c:ae:94:99:e1:
a0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:70:7D:2D:87:F0:0E:25:86:AF:87:AA:6D:3C:10:CB:5F:A5:60:B3
X509v3 Authority Key Identifier:
keyid:CB:57:99:D8:D0:5F:4A:02:00:11:DC:A8:03:17:62:BE:A0:12:25:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1eZ2NBfSgIAEdyoAxdivqASJV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:bd:b2:c1:9a:69:d7:5b:37:ca:48:e2:5e:e6:79:f9:40:4d:
c2:47:5c:3b:50:33:cc:cb:3e:46:aa:d8:94:0f:95:29:36:30:
ea:99:9e:5c:fe:5c:8d:ec:bc:59:55:14:0d:ce:ee:d4:e0:51:
e3:19:34:c6:9b:98:74:ce:3c:fe:1b:a3:60:3f:fa:b6:a9:ea:
4b:f0:35:2e:5f:15:8f:c0:e0:18:cc:a4:c5:a6:c8:1d:69:b3:
17:8d:58:bc:76:7d:8f:d5:c1:27:ca:d9:73:61:f8:c2:bc:b6:
71:31:04:ee:62:8f:00:27:b9:a7:92:5b:60:ab:8a:da:b2:c3:
ac:25:1c:73:d9:c4:80:2e:a6:d5:99:55:81:78:09:46:19:17:
cb:02:62:e8:78:b4:28:9b:7c:52:78:98:55:2e:8e:bd:de:5c:
bb:77:1b:2c:7c:33:eb:eb:dd:99:3c:0a:29:d9:c7:53:87:b0:
29:8b:00:17:ee:db:bb:8e:e0:92:d1:34:48:5a:2d:52:4b:a4:
82:22:81:a6:ea:a0:c0:6e:bd:21:36:aa:d5:dd:00:47:63:36:
23:68:d6:1c:93:03:2b:14:52:64:53:20:0d:b1:7a:a8:5b:72:
42:d4:9e:77:df:b5:da:a0:ad:6f:bf:41:fb:da:62:ad:7b:0e:
d4:65:a0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 21:06:47 2024 by rpki-client on console-fra.rpki-client.org